This vulnerability in AutomatorWP (<= 5.2.4) involves improper neutralization of special elements used in SQL commands, enabling SQL Injection attacks. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, scope changed, high confidentiality impact, no integrity impact, and low availability impact. The issue allows an attacker with high privileges to execute crafted SQL commands that could compromise confidentiality and partially affect availability.

Successful exploitation could lead to unauthorized disclosure of sensitive information due to SQL Injection. Integrity is not impacted, but availability impact is low. The attacker must have high privileges, which limits the attack surface to privileged users. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, restrict high-privilege access to the affected plugin and consider disabling AutomatorWP if feasible.